Solid worries me because the apps don't run on your server. That means Solid apps can do all kinds of bad things and your only recourse is to stop using it (if you even know about the badness). For the same reason, Solid's privacy expectations aren't really enforceable; apps could mine your data and you'd have no way of knowing and they could cache your data even after you withdraw permission.